Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          2vWmROUVGmDDTEg1/7KULC9Orlzym5YN3PRdZ/DdyjI=
Subject key identifier:   A6:78:F7:1E:EE:C1:EB:69:52:A6:7A:5A:EC:75:EF:AB:46:81:6C:60
Certificate issuer:       /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
Certificate serial:       65679D572AE3727D8D154E9944DE7B5253455BDE
Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:38 +0000
ROA not before:           Thu 07 Nov 2024 20:49:38 +0000
ROA not after:            Thu 06 Nov 2025 20:54:38 +0000
asID:                     262493
IP address blocks:        2804:fec:c748::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl
                          rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:67:9d:57:2a:e3:72:7d:8d:15:4e:99:44:de:7b:52:53:45:5b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF
        Validity
            Not Before: Nov  7 20:49:38 2024 GMT
            Not After : Nov  6 20:54:38 2025 GMT
        Subject: CN=A678F71EEEC1EB6952A67A5AEC75EFAB46816C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:34:17:52:ed:98:f7:7f:5d:ae:d8:6c:45:
                    a5:72:65:3f:aa:18:eb:a3:bf:ec:33:2a:c5:7d:12:
                    4c:46:4f:c6:3a:58:b7:5e:42:21:5f:de:50:47:fb:
                    36:0e:b5:c6:7a:b1:39:07:54:34:9d:80:54:da:bb:
                    c9:b6:9d:2f:04:75:b4:a8:f6:70:8f:a4:0c:c7:4f:
                    af:66:51:f5:eb:03:b1:09:17:68:6c:a3:dd:83:bf:
                    72:68:89:c0:5f:4c:42:52:56:5d:12:02:0e:f9:d2:
                    f1:02:9a:9a:9b:3a:a3:8b:8e:75:a1:06:c5:c0:a9:
                    be:ab:22:48:0f:8a:bd:2f:3b:72:21:c5:00:75:de:
                    3f:fa:a1:cf:99:b2:ae:12:c9:9e:c5:59:4d:89:c5:
                    11:1c:a2:a0:56:88:bb:85:cb:b4:b8:8a:c5:87:f1:
                    53:5a:4f:b8:52:e8:63:0e:30:f3:70:ea:4d:ce:8c:
                    46:cc:f2:5a:a9:89:f8:0e:6a:1e:73:27:86:38:7e:
                    07:a7:df:39:71:a4:25:2d:11:f1:3d:fa:fc:b1:13:
                    e7:28:5b:9d:ba:9e:55:83:10:1b:b9:32:e6:62:b0:
                    93:1c:a9:53:94:43:54:18:dd:bd:c1:92:ac:19:1e:
                    c2:6e:35:b4:a6:5b:7d:b1:cf:d9:81:1a:dd:35:81:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:78:F7:1E:EE:C1:EB:69:52:A6:7A:5A:EC:75:EF:AB:46:81:6C:60
            X509v3 Authority Key Identifier:
                keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c748::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:c5:57:c2:4a:6b:b4:81:49:9f:70:7a:73:79:87:ef:fd:d3:
         bc:fa:1b:04:8e:d8:e5:a6:34:24:96:00:23:b7:69:13:db:75:
         d3:70:04:99:52:3b:18:0e:7b:65:86:bd:93:60:d2:45:91:90:
         c6:48:fb:cf:c4:98:c2:51:80:48:2a:90:5b:31:7a:1d:97:71:
         15:57:ad:69:12:76:92:fa:f0:2c:33:8a:e0:21:69:de:3e:b1:
         25:4a:5b:12:5b:30:48:de:bb:ed:14:fe:be:7e:42:74:4d:64:
         f9:dd:11:51:70:fc:aa:85:e2:1b:a4:95:53:62:d6:fb:87:9d:
         c1:fd:23:27:69:ad:79:16:fc:35:e5:1f:04:f3:50:23:8d:23:
         e5:16:47:f6:e1:4a:07:c2:db:ad:cb:de:86:4e:d3:c1:9c:64:
         60:eb:07:bd:25:23:57:e9:0b:d9:ec:78:8a:89:cd:ed:0a:60:
         b6:89:16:8a:66:68:fa:67:e8:67:db:75:e8:e5:3e:51:c0:1e:
         a6:c7:c5:81:f8:ad:0f:00:1e:e9:d1:4b:9f:b6:10:31:92:24:
         e6:f3:66:48:ae:07:52:42:29:53:ca:ec:da:e7:d6:c4:af:8c:
         2c:be:95:ff:f5:3c:ed:fc:0c:b0:c6:45:a2:66:08:2e:3f:c4:
         fd:58:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org